CVE-2021-26614: Iptime c200 Firmware

Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days.

ius_get.cgi in IpTime C200 camera allows remote code execution. A remote attacker may send a crafted parameters to the exposed vulnerable web service interface which invokes the arbitrary shell command.

Affected products

• Iptime c200 Firmware: before 1.060 (fixed in 1.060)

Published 2021-11-22. Last modified 2026-06-17.